Re: Import users using ldapadd and SHA encrypted passwords.
a...@novell.com
Hash: SHA1
You cannot have a UP policy applied to users when importing a Simple
password. Remove it (or define one that explicitly disables UP) until the
passwords are imported.
Good luck.
On 09/03/2010 07:06 AM, edb96001 wrote:
>
> Hi
> I am trying to import users using a LDIF import file, and that works
> basicly fine, untill i add the SHA encrypted password field. See the
> input file used: This works fine if i enter a cleartext password.
>
> Version: 1
> #1
> dn: cn=testid,ou=test,o=bistud
> changetype: add
> objectClass: person
> objectClass: user
> objectClass: top
> objectClass: organizationalPerson
> cn: testid
> uid: testid
> name: Hansr
> sn: something
> userPassword: {SHA}7C4A8D09CA3762AF61E59520943DC26494F8941B
>
> I get this error message when i try to run the ldapadd command.
> *Server is unwilling to perform (53) additional info: NDS error: bad
> password (-222*)
>
> I have made a Universal Password policy witch is added to the test OU
> where i am trying to import these users. The server used for adding the
> users have a copy of the given partition. I get the same error message
> using the ICE utility !
>
> I have tried this inn another tree(test tree ), then the import worked
> , no error message but the password imported was the hole hash ! Not the
> actually password ! If i pasted the hole hash string i was able to log
> in ? Any special switch i need to enter to tell that the password i
> encrypted ?
>
> Thanks for any replays.
>
> Hans Petter
> BI Oslo.
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/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=WTTx
-----END PGP SIGNATURE-----